TeconceTheme vulnerabilities

We track 12 vulnerabilities in TeconceTheme products across 11 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2026.

12vulnerabilities

10critical

2high

0exploited

9.0average CVSS score

Latest TeconceTheme vulnerabilities

9.3 Critical severity
Emerce Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69366Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Emerce Core emerce-core allows Blind SQL Injection.This issue affects Emerce Core: from n/a through <= 1.8.
9.3 Critical severity
Uroan Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69365Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affects Uroan Core: from n/a through <= 1.4.4.
9.3 Critical severity
Woodly Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69310Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Woodly Core woodly-core allows Blind SQL Injection.This issue affects Woodly Core: from n/a through <= 1.4.
9.3 Critical severity
Saasplate Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69309Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This issue affects Saasplate Core: from n/a through <= 1.2.8.
9.3 Critical severity
Nestbyte Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69308Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Nestbyte Core nestbyte-core allows Blind SQL Injection.This issue affects Nestbyte Core: from n/a through <= 1.2.
9.3 Critical severity
Medinik Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69307Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Medinik Core medinik-core allows Blind SQL Injection.This issue affects Medinik Core: from n/a through <= 1.3.6.
9.3 Critical severity
Electio Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69306Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Electio Core electio-core allows Blind SQL Injection.This issue affects Electio Core: from n/a through <= 1.4.
9.3 Critical severity
Crete Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69305Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Crete Core crete-core allows Blind SQL Injection.This issue affects Crete Core: from n/a through <= 1.4.3.
9.3 Critical severity
Allmart: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69304Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affects Allmart: from n/a through <= 1.1.
9.3 Critical severity
Coven Core: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-69295Feb 20, 2026TeconceTheme
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Coven Core coven-core allows Blind SQL Injection.This issue affects Coven Core: from n/a through <= 1.3.
7.2 High severity
Allmart: Server-Side Request Forgery
CVE-2025-49418Jul 4, 2025TeconceTheme
Server-Side Request Forgery (SSRF) vulnerability in TeconceTheme Allmart allmart-core allows Server Side Request Forgery.This issue affects Allmart: from n/a through <= 1.0.0.
7.5 High severity
Mayosis Core: Improper Limitation of a Pathname to a Restricted Directory
CVE-2025-1565Apr 25, 2025TeconceTheme
The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary f